Global Privacy & Data Protection
Navigate the complex landscape of global data protection regulations with expert compliance consulting and audit services.
General Data Protection Regulation
Key Requirements
- Lawful basis for processing personal data
- Data subject rights (access, erasure, portability)
- Mandatory Data Protection Impact Assessments
- 72-hour breach notification requirement
Applies to: Any organization processing personal data of EU residents, regardless of location.
Digital Personal Data Protection Act
Key Requirements
- Consent-based data processing framework
- Data fiduciary and processor obligations
- Rights of data principals including erasure
- Significant Data Fiduciary compliance requirements
Applies to: Organizations processing digital personal data within India or of Indian data principals.
California Consumer Privacy Act
Key Requirements
- Right to know, delete, and opt-out of data sale
- Do Not Sell My Personal Information provisions
- Non-discrimination for exercising privacy rights
- Annual privacy policy disclosure requirements
Applies to: Businesses meeting revenue, data volume, or data sale thresholds serving California residents.
Health Insurance Portability and Accountability Act
Key Requirements
- Protected Health Information (PHI) safeguards
- Administrative, physical, and technical controls
- Business Associate Agreement requirements
- Breach notification and enforcement provisions
Applies to: Healthcare providers, health plans, clearinghouses, and their business associates.
Children's Online Privacy Protection Act
Key Requirements
- Verifiable parental consent for children under 13
- Clear and comprehensive privacy notices
- Restrictions on data collection from children
- Parental rights to review and delete data
Applies to: Operators of websites and online services directed to children under 13, or with actual knowledge of child users.
Family Educational Rights and Privacy Act
Key Requirements
- Protection of student education records
- Parental and eligible student access rights
- Consent requirements for record disclosure
- Directory information opt-out provisions
Applies to: Educational agencies and institutions receiving federal funding from the U.S. Department of Education.